1 # Using NFSv4 with Moonshot
3 The steps below have been tested on Debian Squeeze using MIT 1.10 (from testing), as described in the [[Debian guide|configuringdebian]].
5 ## Install NFSv4 client/server and export a directory using standard Kerberos authentication
6 Make sure you can mount the filesystem with something like:
8 # mount -t nfs4 -o sec=krb5 moonshot.ics.muni.cz:/ /mnt
10 ## Remove the dependency on libgssglue
11 $ apt-get source librpcsecgss
12 $ cd librpcsecgss-0.19
13 $ patch -p0 < librpcsecgss.patch
15 # dpkg -i ../librpcsecgss*deb
17 The librpcsecgss.patch mentioned above is [[here|librpcsecgss.patch]]
20 ## Install kernel that supports strong encryption (i.e. >= 2.6.35)
21 # apt-get install -t testing linux-image-amd64
25 $ git clone /afs/ics.muni.cz/home/kouril/nfs-utils
27 $ git checkout moonshot
29 $ ./configure GSSGLUE_CFLAGS=-I. GSSGLUE_LIBS=-lgssapi_krb5
32 # utils/gssd/svcgssd -n
34 ## Configure identity mapping
35 Edit /etc/idmapd.conf specifying:
44 kouril@ics.muni.cz = kouril
48 ## Mount the exported directory:
49 Standard mount and other tools should be enough to
51 # mount -t nfs4 -o sec=krb5 moonshot.ics.muni.cz:/ /mnt